Cookie Policy

Last updated: October 2026

A cookie is a small file your browser stores when you visit a website. Unikorn uses cookies to keep you signed in, remember the language you chose and count views.

1. Essential cookies

Without these cookies, you cannot sign in or use your account.

Name	Purpose
authjs.session-token (or __Secure-authjs.session-token)	Keeps your sign-in session.
authjs.csrf-token	Protects against forged requests when you sign in and out.
authjs.callback-url	Remembers which page to return to after you sign in.
authjs.state, authjs.pkce.code_verifier	Temporary cookies while you sign in with Google or GitHub, deleted automatically when done.
signup_challenge	Confirms that your browser has passed the anti-bot check before an account is created with Google or GitHub. Expires on its own after 10 minutes.
oauth_consent_…	A temporary cookie when you allow an app such as Claude or ChatGPT to connect to your account, used only on the consent page.
onboarding_seen	Remembers that you have seen the welcome steps after signing up.
cookie_consent	Remembers your choice about analytics and advertising cookies for 12 months.
impersonate_session	Used only when the Unikorn team helps you by seeing Unikorn as your account sees it.

On unikorn.vn, the authjs cookie names carry an extra __Secure- or __Host- prefix.

2. Interface cookies

Name	Purpose
NEXT_LOCALE	Remembers the display language (Vietnamese, English or Japanese). It is first set from your browser's language, then from your choice.
sidebar_state	Remembers whether the sidebar is open or collapsed.

3. Unikorn analytics cookies

Name	Purpose
vid	A random visitor ID used to count views and viewers on each page, and visits by source. It does not contain your name or email.
_attr	Stores the referral source (the website that sent you, UTM parameters if any, the first page you landed on) when you arrive at Unikorn from another site or a campaign link. It is saved to your account when you sign up, and the cookie is then deleted.

4. Third-party cookies

Cloudflare Turnstile: runs at sign-up, sign-in and on forms such as product submission, contact, reviews and Talk to tell real people from bots. Cloudflare may set cookies for this.
Google Analytics, Microsoft Clarity, Meta Pixel: run and set cookies only after you press Accept in the cookie notice, to measure traffic and ad performance.

The full list of services that process data with us is in the Privacy Policy.

5. Other browser storage

Besides cookies, Unikorn uses your browser's local storage (localStorage, sessionStorage) to remember interface choices such as tips you have seen or notices you have closed. Some choices, such as Uni's colour, are also saved to your account so they work on other devices.

6. Managing cookies

You can change your choice about analytics and advertising cookies under Cookie settings at the bottom of the page. You can also view and delete cookies and block third-party cookies in your browser settings. If you block essential cookies, you will not be able to sign in.